Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/755cca33-61d3-3f09-a038-89752e8240ed.roa
File:                     755cca33-61d3-3f09-a038-89752e8240ed.roa (raw, json)
Hash identifier:          VnQJ8nWBKZyRbBFsUWz7BUWd72xQhEaOuIlxwl8VnOY=
Subject key identifier:   0E:FD:5F:E3:4F:5C:67:8D:50:1D:C4:9B:28:F0:08:9A:3E:19:E0:EE
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB69081F6FA7569D1ABCE00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/755cca33-61d3-3f09-a038-89752e8240ed.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        174.137.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:81:f6:fa:75:69:d1:ab:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=ab6541d5-7266-4c9d-99f1-402b41d0ca74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:21:f4:a5:56:e0:b4:1e:4f:a0:92:93:56:6d:
                    32:cc:8e:8b:d7:34:5d:13:51:95:bf:c7:a6:b0:ea:
                    65:4d:2d:77:ba:02:e6:16:5c:93:b1:e9:85:af:3a:
                    e3:5d:01:b2:63:8f:75:2d:d8:71:80:62:71:43:f6:
                    d8:86:08:9e:da:5f:c2:f7:97:c3:ee:43:cc:d9:4a:
                    81:6f:9d:8a:2c:58:1f:de:1e:a8:a0:2d:03:7d:fe:
                    34:7f:5e:81:29:e6:fc:21:e0:2f:3a:0a:eb:c6:64:
                    d6:b6:1d:ed:1c:5b:60:75:83:7e:74:d0:e5:10:ee:
                    4b:e7:a7:83:e7:09:44:de:18:04:30:e3:4f:28:66:
                    7a:39:0d:fb:c7:39:1f:55:4d:af:f8:0b:17:97:b9:
                    f0:87:4a:7d:cf:cb:60:9e:97:44:ec:af:80:fa:91:
                    18:5d:b3:39:1c:0e:1e:ad:08:fb:d9:f6:9d:37:83:
                    1c:10:b8:9f:46:f6:39:00:e5:a0:0e:dd:f1:51:11:
                    60:db:e7:f4:de:4f:87:8f:06:4a:7c:29:f0:6c:67:
                    60:30:33:35:61:ad:69:d4:85:7a:5f:8f:0e:5c:e4:
                    0c:5a:61:34:ac:58:f0:8a:8f:52:2e:f7:34:aa:b3:
                    d3:7f:89:bc:6f:db:da:a9:98:75:8a:9e:09:7f:01:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:5F:E3:4F:5C:67:8D:50:1D:C4:9B:28:F0:08:9A:3E:19:E0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/755cca33-61d3-3f09-a038-89752e8240ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:7c:a8:aa:d2:16:55:5d:bc:84:a2:3c:89:fc:a6:a7:a0:
         c6:27:47:b7:f0:be:83:f0:0c:75:48:93:df:98:3f:9e:59:07:
         f5:61:a6:85:09:f5:57:22:11:a6:18:ff:20:49:87:f0:4f:fb:
         18:43:5b:cb:45:f2:80:0d:26:09:0f:91:ff:e4:91:c4:d4:57:
         1c:42:b2:b0:30:17:4b:c0:20:9f:27:28:fa:b8:8a:f5:79:97:
         46:61:fc:14:35:1a:b3:6d:40:a9:fd:e2:b1:a7:28:08:35:df:
         e6:cd:0d:13:32:41:8e:d3:ff:22:89:c0:7a:3b:d3:c2:d2:a9:
         96:df:84:eb:90:df:9b:4b:b1:35:76:63:44:41:22:45:89:09:
         b3:ed:7d:57:34:22:ad:16:d2:c1:3d:99:d2:aa:28:68:a7:c8:
         82:cf:93:bc:a0:5b:74:6b:d1:9e:6b:db:a2:ff:1b:59:a5:d2:
         cc:88:c6:e5:d5:d3:72:65:9b:41:89:47:1f:f5:56:1a:f1:1a:
         e7:78:20:64:3c:9a:7b:ea:62:66:59:3d:df:66:ec:3f:eb:67:
         b7:77:a9:a7:c2:74:27:02:39:6f:c3:91:1e:2d:b1:f8:a9:f6:
         d6:28:23:2a:cb:20:71:4f:85:d3:10:85:58:48:34:75:30:d0:
         e9:e2:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:34 2024 by rpki-client on console-ams.rpki-client.org